From owner-freebsd-stable@FreeBSD.ORG Sun Dec 9 06:04:25 2007 Return-Path: Delivered-To: freebsd-stable@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 993E016A41B for ; Sun, 9 Dec 2007 06:04:25 +0000 (UTC) (envelope-from dougb@FreeBSD.org) Received: from mail2.fluidhosting.com (mx21.fluidhosting.com [204.14.89.4]) by mx1.freebsd.org (Postfix) with SMTP id 332E413C45D for ; Sun, 9 Dec 2007 06:04:24 +0000 (UTC) (envelope-from dougb@FreeBSD.org) Received: (qmail 28868 invoked by uid 399); 9 Dec 2007 06:04:24 -0000 Received: from localhost (HELO lap.dougb.net) (dougb@dougbarton.us@127.0.0.1) by localhost with ESMTP; 9 Dec 2007 06:04:24 -0000 X-Originating-IP: 127.0.0.1 Message-ID: <475B8566.2050008@FreeBSD.org> Date: Sat, 08 Dec 2007 22:04:22 -0800 From: Doug Barton Organization: http://www.FreeBSD.org/ User-Agent: Thunderbird 2.0.0.9 (X11/20071119) MIME-Version: 1.0 To: Jeremy Chadwick References: <4758DCDA.ED9F0C56@kuzbass.ru> <20071207074910.GA2404@eos.sc1.parodius.com> In-Reply-To: <20071207074910.GA2404@eos.sc1.parodius.com> X-Enigmail-Version: 0.95.5 OpenPGP: id=D5B2F0FB Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: Eugene Grosbein , Patrick van Iersel , freebsd-stable@FreeBSD.org Subject: Re: Extreme load with local password db lookups X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 09 Dec 2007 06:04:25 -0000 Jeremy Chadwick wrote: > On Fri, Dec 07, 2007 at 08:44:37AM +0100, Patrick van Iersel wrote: >>> From: Eugene Grosbein >>> See http://www.freebsd.org/cgi/query-pr.cgi?pr=75855 >>> It seems the regression from RELENG_4 is still here. >>> >>> There are so many regressions in performance that I still >>> prefer to invest time to patch bsd.ports.mk to support 4.x >>> (and have a success, I use fresh ports with 4.x these days) >>> then upgrade my UP boxes to 6.x and suffer from loss of performaince. >> For what it's worth, Eugene's suggestion of changing nsswitch.conf actually >> helps. It was mentioned in the PR above as well. It's still a workaround but >> it works good enough for me now. > > I stand corrected. :-) The PR referenced by Eugene is dead on. The > priority on that PR should really be changed to medium or high, because > the impact is major. I'm sure large hosting/shell providers are being > bitten by this. My nsswitch.conf looks like the following. Do you get the same benefit (faster lookups) by commenting out the _compat methods, or only if you change group and passwd to 'files'? Doug group: compat #group_compat: nis hosts: files dns networks: files passwd: compat #passwd_compat: nis shells: files services: compat #services_compat: nis protocols: files rpc: files -- This .signature sanitized for your protection